Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/r3p8XMwcqAmXyonA67gG5KyDMk8.roa
File: r3p8XMwcqAmXyonA67gG5KyDMk8.roa (raw, json)
Hash identifier: W3LtjBTfw8JpwVLfBSb4wvoIcLS8m9n94Jp8osd+AvQ=
Subject key identifier: AF:7A:7C:5C:CC:1C:A8:09:97:CA:89:C0:EB:B8:06:E4:AC:83:32:4F
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 019423D6A4D4C10559015321CCE107022505
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/r3p8XMwcqAmXyonA67gG5KyDMk8.roa
Signing time: Wed 01 Jan 2025 21:47:36 +0000
ROA not before: Wed 01 Jan 2025 21:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200845
IP address blocks: 178.251.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a4:d4:c1:05:59:01:53:21:cc:e1:07:02:25:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Jan 1 21:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af7a7c5ccc1ca80997ca89c0ebb806e4ac83324f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:04:45:4f:43:15:08:f3:89:95:f1:34:c5:d4:
2b:f0:60:5a:3b:9e:e4:ab:c4:7c:c4:9f:b1:68:d2:
b6:d0:60:42:d1:39:bf:0c:4e:7a:c6:92:6f:67:d5:
fd:64:b0:4e:04:d2:eb:f6:2b:a2:1b:2a:fd:ae:20:
90:5a:f3:31:0e:d0:10:10:79:74:03:87:1f:3b:82:
e5:9a:a9:1e:6a:05:67:e3:64:4b:6c:3f:21:d4:e4:
4e:8e:ab:32:84:57:6d:38:06:87:47:8e:90:a3:bf:
0f:e3:e9:5e:23:4a:ec:75:01:55:f1:57:56:02:f9:
24:18:3e:c5:13:d3:26:1d:8a:e9:01:5e:ce:d2:f4:
fb:dd:00:49:1f:b5:2d:8b:99:0e:55:c4:51:89:fa:
68:24:55:4c:57:5b:82:6b:e4:e6:5c:09:0c:5e:6e:
7f:d1:a8:70:fc:76:39:75:dc:9a:fe:11:30:86:b6:
e3:e6:d5:a6:d6:a3:14:d5:73:96:a8:8b:b4:3d:f9:
9d:53:72:41:07:80:a7:13:08:64:fc:05:63:c7:77:
fa:ba:41:a9:2a:49:0c:3c:e5:c7:ae:0e:6f:a5:87:
90:23:6d:19:f7:23:b3:f1:0e:2b:3e:01:58:a5:22:
86:42:bb:5b:55:39:b3:d5:79:9a:e0:83:ab:81:b1:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7A:7C:5C:CC:1C:A8:09:97:CA:89:C0:EB:B8:06:E4:AC:83:32:4F
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/r3p8XMwcqAmXyonA67gG5KyDMk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.16.0/22
Signature Algorithm: sha256WithRSAEncryption
25:24:b3:50:1a:51:88:6b:95:57:30:24:75:a6:d3:24:29:f3:
c0:2b:74:91:0c:86:70:ea:ab:23:0d:1c:62:14:30:d5:42:68:
1d:3f:4b:a8:2f:ff:0f:cb:d9:64:4d:e3:f0:58:55:f2:b3:8d:
fe:42:84:52:e4:50:02:bc:ca:e2:93:09:2d:54:ec:eb:3c:14:
84:3b:64:f6:a0:ae:1a:ad:d6:c5:48:7f:cc:85:ab:7b:a6:b9:
96:9b:ac:97:41:4e:a2:f0:f4:ed:4e:2c:f4:82:85:c9:a7:a6:
90:6d:d8:d2:6d:08:19:1f:df:d2:1a:3b:81:52:b9:25:0d:cf:
c4:b2:4c:0c:a1:51:5f:5f:a6:0e:d9:74:69:3d:c7:cc:42:63:
d4:6f:ae:fb:2b:1f:10:45:de:a0:3d:0b:ab:40:48:f1:95:0b:
cc:53:f6:79:70:00:98:a0:15:c6:34:80:b4:d7:03:b4:af:4f:
50:40:90:2a:37:8b:50:29:c8:08:5c:d4:c4:33:18:5a:6a:e8:
60:60:cf:2a:b2:e6:d1:0e:5b:d2:d9:70:aa:36:e3:a6:66:75:
3c:b2:81:7d:2e:e7:57:ca:2b:8e:6f:73:7d:e9:b4:30:80:91:
00:3e:b0:e7:d8:3f:be:6d:06:36:33:64:79:6b:3d:08:49:a7:
f0:37:6c:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1qTUwQVZAVMhzOEHAiUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOTMzZTAxMzY0NGRiOWM5ZWU5YjkxZGY3MmUxMzM4ZGI4
ZTIwOTcwHhcNMjUwMTAxMjE0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjdhN2M1Y2NjMWNhODA5OTdjYTg5YzBlYmI4MDZlNGFjODMzMjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wRFT0MVCPOJlfE0xdQr8GBaO57k
q8R8xJ+xaNK20GBC0Tm/DE56xpJvZ9X9ZLBOBNLr9iuiGyr9riCQWvMxDtAQEHl0
A4cfO4LlmqkeagVn42RLbD8h1OROjqsyhFdtOAaHR46Qo78P4+leI0rsdQFV8VdW
AvkkGD7FE9MmHYrpAV7O0vT73QBJH7Uti5kOVcRRifpoJFVMV1uCa+TmXAkMXm5/
0ahw/HY5ddya/hEwhrbj5tWm1qMU1XOWqIu0PfmdU3JBB4CnEwhk/AVjx3f6ukGp
KkkMPOXHrg5vpYeQI20Z9yOz8Q4rPgFYpSKGQrtbVTmz1Xma4IOrgbElAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK96fFzMHKgJl8qJwOu4BuSsgzJPMB8GA1UdIwQY
MBaAFJKTPgE2RNucnum5HfcuEzjbjiCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3BNLUFUWkUyNXllNmJrZDl5NFRPTnVPSUpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82YmVmMjItZjM0NS00NjAzLWExZTkt
NWNjMmVmMDk5YWVlLzEvcjNwOFhNd2NxQW1YeW9uQTY3Z0c1S3lETWs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82YmVmMjItZjM0NS00NjAzLWExZTktNWNjMmVmMDk5YWVl
LzEva3BNLUFUWkUyNXllNmJrZDl5NFRPTnVPSUpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsvsQMA0G
CSqGSIb3DQEBCwUAA4IBAQAlJLNQGlGIa5VXMCR1ptMkKfPAK3SRDIZw6qsjDRxi
FDDVQmgdP0uoL/8Py9lkTePwWFXys43+QoRS5FACvMrikwktVOzrPBSEO2T2oK4a
rdbFSH/Mhat7prmWm6yXQU6i8PTtTiz0goXJp6aQbdjSbQgZH9/SGjuBUrklDc/E
skwMoVFfX6YO2XRpPcfMQmPUb677Kx8QRd6gPQurQEjxlQvMU/Z5cACYoBXGNIC0
1wO0r09QQJAqN4tQKcgIXNTEMxhaauhgYM8qsubRDlvS2XCqNuOmZnU8soF9LudX
yiuOb3N96bQwgJEAPrDn2D++bQY2M2R5az0ISafwN2yo
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:37:18 2025 by rpki-client